GHSA-HM7R-C7QW-GHP6

creationtimestamp| type| source ---|---|--- 2026-04-06 19:29:09+00:00| seen| Telegram/t1F-Vxaulmn07lvg5ppSTSOssGvqtwkUpkkBVUVRjFPlk...

GHSA-79C4-CVV7-4QM3

creationtimestamp| type| source ---|---|--- 2026-04-06 19:28:12+00:00| published-proof-of-concept| Telegram/FD1XDPHxmeq4cPhZAsKic1sVLDUHGuIRMXt4NvJcjYqn2U...

CVE-2026-5668

creationtimestamp| type| source ---|---|--- 2026-04-06 19:04:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mitxewiwuz2j...

Allocation of Resources Without Limits or Throttling

Overview strawberry-graphql is an A library for creating GraphQL APIs Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the WebSocket subscription handling process. An attacker can exhaust server resources by sending a large number of...

GHSA-36XV-JGW5-4Q75 @nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')

Impact What kind of vulnerability is it? Who is impacted? SseStream.transform interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline characters \r, \n. Since the SSE protocol treats both \r and \n as field delimiters and \n\n as...

@nestjs/core Improperly Neutralizes Special Elements in Output Used by a Downstream Component ('Injection')

Impact What kind of vulnerability is it? Who is impacted? SseStream.transform interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline characters \r, \n. Since the SSE protocol treats both \r and \n as field delimiters and \n\n as...

GHSA-588R-CR5C-W6HF

creationtimestamp| type| source ---|---|--- 2026-04-06 17:32:59+00:00| seen| Telegram/Nu9QDXzNbve1iNgaEifpWzTHqsZ9MAX7l9lhuN92ZYucbK4...

CVE-2026-5665

creationtimestamp| type| source ---|---|--- 2026-04-06 17:32:59+00:00| seen| Telegram/Nu9QDXzNbve1iNgaEifpWzTHqsZ9MAX7l9lhuN92ZYucbK4...

GHSA-2GG9-6P7W-6CPJ

creationtimestamp| type| source ---|---|--- 2026-04-06 17:32:38+00:00| seen| Telegram/n5Nok-XlRHEre5O89LvYLplT02rw8wZYprnGR4USXlLgM...

BIT-PARSE-2026-34573 Parse Server: GraphQL complexity validator exponential fragment traversal DoS

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 8.6.68 and 9.7.0, the GraphQL query complexity validator can be exploited to cause a denial-of-service by sending a crafted query with binary fan-out fragment spreads. A singl...

CVE-2026-5633

creationtimestamp| type| source ---|---|--- 2026-04-06 09:16:06+00:00| published-proof-of-concept| Telegram/5ijLrALAuqXYdoOjryiznkXUmcGfws-2xPX0cuo3yo2hM 2026-04-06 10:25:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mit2ei7eqg2o...

CVE-2024-47637

creationtimestamp| type| source ---|---|--- 2026-04-06 09:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3misvmlenyp2f...

PT-2026-30760

Name of the Vulnerable Software and Affected Versions Nest versions prior to 11.1.18 Description The SseStream. transform function interpolates message.type and message.id directly into Server-Sent Events text protocol output without sanitizing newline characters r, . Because the SSE protocol use...

ShieldNet: Network-Level Guardrails against Emerging Supply-Chain Injections in Agentic Systems

Existing research on LLM agent security mainly focuses on prompt injection and unsafe input/output behaviors. However, as agents increasingly rely on third-party tools and MCP servers, a new class of supply-chain threats has emerged, where malicious behaviors are embedded in seemingly benign tool...

PT-2026-34977

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference exists in the alps raw event function within the hid-alps driver. This occurs because the driver fails to properly check if it has been claimed correctly befor...

CVE-2026-5603

creationtimestamp| type| source ---|---|--- 2026-04-05 23:24:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mirvgw46kw2n 2026-04-06 04:18:10+00:00| seen| https://bsky.app/profile/adobedigest.bsky.social/post/3misfu7eyij2d...

CVE-2026-5560

creationtimestamp| type| source ---|---|--- 2026-04-05 12:51:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqs3e4njf23...

CVE-2026-5532

creationtimestamp| type| source ---|---|--- 2026-04-05 04:13:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mipv3zjfcs2g...

[SECURITY] Fedora 43 Update: libinput-1.30.3-1.fc43

libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. It provides device detection, device handling, input device event processing and abstraction so minimize the amount of custom input code the user of libinput...

CVE-2026-35570

creationtimestamp| type| source ---|---|--- 2026-04-04 15:00:15+00:00| published-proof-of-concept| Telegram/lD1pIo6VPHjGmg3aW5vdalntS6EHCArlzrfAmHu2lnKH1Ic 2026-04-21 01:18:26+00:00| published-proof-of-concept| Telegram/Ww620GgPpyXrrMPbpNwPksYQUctI-RNYBJrVLxtJIutZ-I 2026-04-21 03:21:28+00:00| see...